by Kastro
Paper/Archive/CVE-2020-8758

CVE-2020-8758

intel — Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.7…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 79.5.795 × 2015.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to potentially enable escalation of privilege via network access. On un-provisioned systems, an authenticated user may potentially enable escalation of privilege via local access.

Affected

ProductAffectedFixed inSource
Intel(R) AMT and Intel(R) ISMBefore versions 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00404.htmlrefsecurity.netapp.com/advisory/ntap-20200911-0005